mirror of
https://github.com/flatcar/scripts.git
synced 2025-08-18 21:11:08 +02:00
eclass: remove -Wl,-O1 from LDFLAGS passed to go_export
Go 1.15.5 fixed a security issue CVE-2020-28366, by rejecting certain LDFLAGS for CGO. See https://github.com/golang/go/issues/42559. However, that change breaks builds based on the Flatcar build chain, because `go_export` sets `$LDFLAGS` to `-Wl,-O1 -Wl,--as-needed`. As a result, Go build fails like: ``` go build runtime/cgo: invalid flag in go:cgo_ldflag: -Wl,-O1 ``` We need to remove the flag `-Wl,-O1` from $LDFLAGS before building the Go runtime, to fix the failure.
This commit is contained in:
parent
72e72c2b3c
commit
5f7126329e
@ -84,6 +84,11 @@ go_export() {
|
|||||||
append-ldflags -nopie
|
append-ldflags -nopie
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
# Remove certain flags from $LDFLAGS to fix validation errors in
|
||||||
|
# Go >= 1.15.5 like:
|
||||||
|
# go build runtime/cgo: invalid flag in go:cgo_ldflag: -Wl,-O1
|
||||||
|
filter-ldflags "-Wl,-O1"
|
||||||
|
|
||||||
export CC=$(tc-getCC)
|
export CC=$(tc-getCC)
|
||||||
export CXX=$(tc-getCXX)
|
export CXX=$(tc-getCXX)
|
||||||
export CGO_ENABLED=${CGO_ENABLED:-1}
|
export CGO_ENABLED=${CGO_ENABLED:-1}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user